
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
File: bKl3-FTGPcn5ehi-exMAISGl04Q.mft (raw, json)
Hash identifier: aKgQAerux0dTYV8lUckj2b5K2PTM/H11JV8UZWuTRyE=
Subject key identifier: EC:DB:55:C6:9B:FF:6A:C1:C5:DB:16:E3:45:F0:9F:20:6D:BE:6E:71
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 01A1DEDEC1E2ACB3A79CAAB881DEF4EA6139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
Manifest number: 0E52
Signing time: Sun 15 Nov 2026 11:01:42 +0000
Manifest this update: Sun 15 Nov 2026 11:01:42 +0000
Manifest next update: Mon 16 Nov 2026 11:01:42 +0000
Files and hashes: 1: 5FHJTMovIyafBSIoWEyalm3rI5M.roa (hash: 7pR5dvgxZrfBVlojZ8DgehqyTZVyIf8AxZ2O6MrCJ8c=)
2: 6E9LTAyzQt1FEPfr7FhyMtAFg2M.roa (hash: TGRGd7XnfyAu8YWaQ6cS2sAir5AhkX//ozfCRednwtk=)
3: 7hJafOPCpVSEdxOE76y6niPbYbg.roa (hash: W1rV0T1F6RwXszjsED1ynOIbEQcRvX19VVt3Nz1sIkc=)
4: BErn-fY5VBXxD2VyEYJN-JdQUW4.roa (hash: suKr1RNc8jf4yYkym4zmqDLZzivo3iXfr9FhGIfjNng=)
5: BUT1NMkorMdojGeQxT5hIJgs8Nc.roa (hash: yZ0THgxl4+lAG7xhsfPweM9P6nUbmimKZfn0DgScC+E=)
6: BfGhYoXLz-5I0FN0nL8DXjOx6EU.roa (hash: Ss4hP6Q3/Oalsvet7/zlDLfrMD1Bv1uUMHsdssewtYI=)
7: DA1lpibgFq5-y_Y3ZxUgcX7RgTo.roa (hash: jnR91XQH0HnolepDmgrXE13NqGBnutXBwTg3aasEMIc=)
8: GVUEDUnF5jUjS5nadTHF8d_a8jM.roa (hash: CNVQH1UrdXTDRK5lM23G9sOU0bUyYlN7wDHyKz8bSA4=)
9: HIFyOEF6o7Rsq5goVjW52OhadgI.roa (hash: k9ek9boUBYYEmOjPJ57YH83oUBsMeWYZC5hDknA/Hs4=)
10: IdbA3ga81eRnRIoyM9ZFsnJoq-0.roa (hash: X6pEz6Y9VtUR71wHETOjVXSfvkgFN13w55bg4lUbPVI=)
11: KlqwNeDSNI-6gcYLBNO5DzJcKIE.roa (hash: Qw0dDm30Ph7VrT6EudqSthxSPTm302Z+oCp8QJLF0jo=)
12: RbdrFxMpPdVSzRp_C-Rku8BRui4.roa (hash: i6eqmLVwiqXYOO52UX4iIvTthJpungIdi65hhhhuuR0=)
13: RuFU5d7ARVr5r4PY4vOdxriie6Y.roa (hash: yyiFBcac7vrMWH3pU/fo+ECKDfP8bGIkfxHEMC+At54=)
14: bKl3-FTGPcn5ehi-exMAISGl04Q.crl (hash: AdiFhflXGPMHji/kU8dVjaC9DU4HeD7IgLjglU60nT0=)
15: bVPAHIj80WWce7a3M1XCyh6YdoE.roa (hash: sdPf2Cf+3VFGeiSN/Ap92x67gRehKgw0gxPfYcFUmLA=)
16: lSC4RzevQeRkikifsAt3gR84fxY.roa (hash: CDC2+wQFTPEwC0Sq9Rnp++UpyacRzQctOXOPJvW93xc=)
17: qEbYFQoXre_OuLtdayPj8liTJCA.roa (hash: jvondzJ1t0alplZUpmymkMm3ArgabFjZkTrg9UVcZXU=)
18: rMHgLwq1dgxl2KpsUSthXs0MWBk.roa (hash: Yk8LFVOWtBI6Eap7t4JN9HPbcuGjrW1IcCeKsknRw5I=)
19: xrze8vo27kvzGHLArTlKKxLK6X8.roa (hash: 472z94Y4BGd5ZtO+s4jKvuHuf1XPqa3fnP1IMEj/HWY=)
20: zvxcn_GD8_hUJXGGJ7rjFFwAQB4.roa (hash: AG7WeXLfc9bch8+moQNIG4Gui1kugzTC1jXXmZYVyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:c1:e2:ac:b3:a7:9c:aa:b8:81:de:f4:ea:61:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Nov 15 11:01:42 2026 GMT
Not After : Nov 16 11:01:42 2026 GMT
Subject: CN=ecdb55c69bff6ac1c5db16e345f09f206dbe6e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:d8:52:74:3c:3e:34:6b:d5:d1:42:21:f6:
0f:e5:ee:9a:d2:21:c1:fc:05:43:d2:a8:d6:f9:12:
fd:8f:cb:3c:cb:f6:8b:b0:89:c2:b8:ea:01:31:41:
be:a5:25:92:23:bf:09:f1:7e:c2:42:90:c8:97:bb:
65:04:10:27:ca:3a:ad:dc:fe:09:64:fb:a5:6e:41:
3c:8f:6e:f5:88:77:a0:30:58:1e:6c:7b:39:d8:b1:
cf:99:2d:6e:03:e7:01:59:1b:04:ed:2d:f6:ba:f8:
28:06:f8:e4:6e:62:17:d5:28:a3:a7:2e:5b:71:a1:
f0:1e:0e:ed:03:fb:85:30:d4:52:9d:78:88:d5:d4:
7d:da:31:0d:8f:a3:0a:07:a2:c9:1a:4b:68:a7:f6:
3a:07:a5:2c:d3:b3:09:b6:b4:56:3f:0f:51:62:14:
96:be:20:ff:9d:01:18:00:94:cc:87:59:4a:0b:9b:
8e:b1:22:5b:0d:0d:89:2f:64:b3:fb:bb:8a:83:fa:
c1:5f:4c:6b:b1:29:27:9d:bf:0f:e9:95:6f:15:74:
a4:c8:52:14:da:23:99:7d:51:bf:db:4b:ed:ca:1e:
1c:e9:04:18:34:40:67:ee:07:bb:48:92:ee:75:80:
d1:5e:10:b2:74:df:34:b6:f6:9a:14:6a:ec:39:2e:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DB:55:C6:9B:FF:6A:C1:C5:DB:16:E3:45:F0:9F:20:6D:BE:6E:71
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ef:21:ba:72:d6:3d:f0:34:0f:cd:1c:28:4b:e2:99:c9:a9:
dd:0e:84:99:c1:ae:6a:2c:4b:21:17:f7:84:c4:d4:5c:9a:51:
75:9a:99:c6:43:af:98:69:af:13:3f:1e:3f:e6:24:67:3c:be:
bc:3f:41:76:1f:c2:1f:3f:1e:72:e2:ff:5e:18:b6:e9:64:fb:
73:06:e8:07:6d:5a:b0:9e:a8:44:13:d4:3d:84:8b:97:92:a2:
c8:85:96:25:f5:42:96:46:09:37:b8:4e:20:79:f9:c5:11:92:
58:77:d0:15:fd:7a:52:f3:49:4e:21:da:3e:00:37:e4:66:4f:
14:1f:9f:a4:f2:77:8d:9b:4c:46:09:83:f3:26:a7:2f:5c:44:
f2:90:7e:5c:d9:f6:33:8e:30:88:92:c2:e2:0d:98:7e:f4:01:
c1:c6:bf:d8:1c:1d:fb:6b:27:c7:1a:f5:d3:e0:14:be:ee:5f:
c9:65:9a:0a:c6:20:18:a4:e2:48:cc:76:63:64:ab:a2:6e:54:
65:15:6d:5a:3b:f1:e1:b2:09:cf:45:ad:fe:bb:88:84:c6:75:
d0:95:35:f5:6e:7a:08:e0:74:08:79:e7:61:a4:52:43:09:09:
08:9e:cd:cc:c9:83:eb:bc:3c:42:c1:7a:70:d8:f6:ba:98:dc:
c3:70:8d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:59:36 2026 by rpki-client